Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#cve-2026-92288 — news, CVEs and analysis · ZeroHour

12:17 UTC· 6m ago

today 77 visits · 95 views · 13 reads·all time 17K views

Tag

#cve-2026-92288

1 stories this week · 1 this month · 1 in 6 months · mostly security

stories per day · 30 days

Related#authentication 1 #lemonldap 1 #oauth2 1 #sso 1 #token-introspection 1

1 stories, newest first · one card per story

oss-security·2d ago

CVE-2026-92288: Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not verify the client secret of a public Relying Party

#lemonldap #oauth2 #token-introspection

CVE-2026-92288